$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/c3cp86yrq2MVCCZxwZd5ksiueCE.roa File: c3cp86yrq2MVCCZxwZd5ksiueCE.roa (raw, json) Hash identifier: xY1R5ewJGZAOSmB4Ye8ig72O5QzgDkXvYIyAKX3qLyg= Subject key identifier: 73:77:29:F3:AC:AB:AB:63:15:08:26:71:C1:97:79:92:C8:AE:78:21 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0478 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c3cp86yrq2MVCCZxwZd5ksiueCE.roa Signing time: Wed 01 Oct 2025 01:34:53 +0000 ROA not before: Wed 01 Oct 2025 01:34:53 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 119.150.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:53 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=737729F3ACABAB6315082671C1977992C8AE7821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:98:70:c1:b6:e5:c4:39:e1:4a:a3:f1:e1: e5:66:e5:25:79:6e:fd:7b:16:69:7c:70:c0:a6:dc: 57:e0:b4:ec:da:0d:60:26:6c:70:f7:13:4e:39:59: 3f:e1:53:db:96:07:c6:fc:bf:7e:4e:cf:3f:1f:d3: e2:30:4c:d8:d5:1c:ea:35:e2:6e:3d:d2:45:fa:47: 25:d3:ae:da:89:d9:80:a8:9d:86:2c:d5:47:11:d7: a8:14:72:d3:d1:70:a8:1d:96:c5:fc:f8:25:7a:25: 37:5e:ac:36:6f:86:13:70:2d:0d:fe:96:e0:b8:9b: a9:1a:c7:5f:4e:cd:af:87:b0:1d:4e:8e:f9:64:3a: 21:0b:4f:c7:7c:0d:92:d3:62:11:1f:e9:33:ec:96: d0:73:36:af:37:5e:6f:f4:30:b1:e7:a5:fb:1f:b2: 15:19:ce:de:6b:76:41:7d:d8:c8:80:96:1c:cf:ac: 8e:07:4a:27:0e:40:01:08:6b:05:4e:40:fe:f9:68: c4:1a:a1:3c:4d:ef:ec:5a:a4:d9:3f:3d:93:c3:b6: 09:5e:f1:4d:50:1f:7b:39:f6:a7:94:be:70:de:66: 72:0d:a8:9b:8b:2b:81:2a:cf:85:9a:78:8f:f7:ff: ba:a7:69:f1:eb:77:36:a0:7c:cc:b5:4b:f6:20:a2: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:77:29:F3:AC:AB:AB:63:15:08:26:71:C1:97:79:92:C8:AE:78:21 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/c3cp86yrq2MVCCZxwZd5ksiueCE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.215.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:58:52:5a:8c:bd:42:87:35:64:81:75:df:bc:1e:95:5e:cf: 16:8d:1b:24:02:5a:a1:86:d2:90:84:08:34:e7:26:ce:16:89: 81:bf:2c:ba:a7:cd:4f:8e:81:f2:b1:4e:1e:55:bf:04:28:94: a7:25:67:a6:ba:3c:37:83:89:de:5f:fd:ac:03:88:0a:d5:5e: ac:61:2d:1d:b3:9b:56:2c:0a:de:f8:75:6d:a0:80:80:63:72: 0a:e9:27:72:b7:da:93:c0:08:0e:52:0d:35:3d:c5:f7:e8:5f: c7:f9:31:c6:de:4e:5e:71:d4:89:6d:b8:55:dc:30:e1:a5:2e: b8:f8:5a:6f:29:34:b2:80:53:f4:4a:f8:ed:ae:13:54:5c:a8: 73:4c:1f:66:e7:83:78:55:6e:53:b1:7e:d5:08:b6:52:63:21: c7:6e:d8:63:31:05:bb:bc:3c:d3:98:3e:7a:e4:da:4b:80:85: ad:72:07:bb:5f:31:df:51:9e:83:b7:06:a4:79:7d:69:5b:e3: 5f:b6:b5:b9:62:a0:18:46:bd:ba:cd:fa:49:16:7c:be:d1:a7: b3:ff:8a:71:ff:fb:b5:3d:40:72:91:be:19:1d:33:a7:f4:97: aa:11:66:5e:2c:5e:98:fc:62:31:50:d7:c9:5f:0e:fd:53:06: 9b:f5:48:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NTNaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczNzcyOUYzQUNBQkFC NjMxNTA4MjY3MUMxOTc3OTkyQzhBRTc4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNvJhwwbblxDnhSqPx4eVm5SV5bv17Fml8cMCm3FfgtOzaDWAm bHD3E045WT/hU9uWB8b8v35Ozz8f0+IwTNjVHOo14m490kX6RyXTrtqJ2YConYYs 1UcR16gUctPRcKgdlsX8+CV6JTderDZvhhNwLQ3+luC4m6kax19Oza+HsB1Ojvlk OiELT8d8DZLTYhEf6TPsltBzNq83Xm/0MLHnpfsfshUZzt5rdkF92MiAlhzPrI4H SicOQAEIawVOQP75aMQaoTxN7+xapNk/PZPDtgle8U1QH3s59qeUvnDeZnINqJuL K4Eqz4WaeI/3/7qnafHrdzagfMy1S/YgounhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUc3cp86yrq2MVCCZxwZd5ksiueCEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2MzY3A4NnlycTJNVkNDWnh3WmQ1a3NpdWVDRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB3ltcwDQYJKoZIhvcNAQELBQADggEBABpYUlqMvUKHNWSBdd+8HpVezxaN GyQCWqGG0pCECDTnJs4WiYG/LLqnzU+OgfKxTh5VvwQolKclZ6a6PDeDid5f/awD iArVXqxhLR2zm1YsCt74dW2ggIBjcgrpJ3K32pPACA5SDTU9xffoX8f5McbeTl5x 1IltuFXcMOGlLrj4Wm8pNLKAU/RK+O2uE1RcqHNMH2bng3hVblOxftUItlJjIcdu 2GMxBbu8PNOYPnrk2kuAha1yB7tfMd9RnoO3BqR5fWlb41+2tblioBhGvbrN+kkW fL7Rp7P/inH/+7U9QHKRvhkdM6f0l6oRZl4sXpj8YjFQ18lfDv1TBpv1SE4= -----END CERTIFICATE-----Generated at Wed Nov 5 20:31:55 2025 by rpki-client